security engineer in industrial environments

AG Solution Group; Barcelona; On-site; EUR 45,000 - 65,000; Full time

Job summary

AG Solution ищет специалиста по OT‑безопасности для защиты промышленной инфраструктуры клиентов. Ваша задача — анализировать, проектировать и реализовывать безопасные решения для OT‑сред. Вы будете работать в тесном сотрудничестве с IT/OT командами и участвовать в полевых выездах к клиентам.

Требуется практический опыт, знание OT‑сетей и принципов архитектуры безопасности. Возможны командировки за границу, гибкий подход к локации в Барселоне.

Qualifications

• Требуется практический опыт обеспечения OT‑безопасности в промышленных условиях.
• Глубокие знания OT‑сетей, SCADA, PLC/DCS и Purdue‑модель.
• Опыт анализа и картирования сложных OT‑сетей.
• Практика сегментирования сетей и перенумерации IP.
• Опыт проведения риск‑оценок и разработки мер снижения риска.
• Понимание принципов безопасной архитектуры и настройки межсетевых экранов.
• Опыт внедрения OT‑охранных мер: FW, мониторинг, реструктуризация сети.
• Умение работать с SNMP/NetFlow и другими протокольными протоколами.

Responsibilities

• Обеспечение безопасности сложной OT‑инфраструктуры в промышленной среде.
• Анализ и картирование OT‑сетей, идентификация уязвимостей.
• Реализация сегментации и перенумерации IP в OT‑сетях.
• Проведение риск‑оценок и разработка мер по их снижению.
• Настройка межсетевых экранов и поддержка безопасной архитектуры.
• Внедрение OT‑файрволов и мониторинга сети.
• Сопровождение проектов вместе с IT/OT и участие в встречах с клиентами.

Skills

OT security

Industrial networking

SCADA/DCS

Network segmentation

IP renumbering

Risk assessments

Firewall configuration

Fortinet

SNMP/NetFlow

Cross-functional collaboration

Russian/Spanish/English komunikasi

Tools

Fortinet Firewall

SNMP

NetFlow

Active Directory

Job description

Описание: AG Solution builds intelligent solutions for the process industry, combining automation, process control, data management, and MES/MOM systems to help manufacturers achieve operational excellence. The company is part of the Quariq Group and operates as an Industry 4.0 partner serving manufacturers worldwide.

Задачи:

• Secure complex and legacy OT infrastructures in industrial environments
• Analyze and map OT networks
• Implement segmentation and IP renumbering for OT networks
• Conduct risk assessments and develop mitigation strategies
• Configure firewalls and maintain secure architecture principles
• Implement OT firewalling, automated network monitoring, or network restructuring
• Monitor OT environments continuously using SNMP, NetFlow, or similar protocols
• Work cross-functionally with IT and OT teams to align security with production needs
• Configure Fortinet firewalls
• Manage Active Directory
• Represent the company in client meetings and on-site engagements
• Identify risks, propose solutions, and maintain stakeholder alignment during commissioning, testing, and audits
• Adapt communication to different client organizations during international travel
• Travel to customer sites during key project phases, including commissioning, testing, and audits

Требования:

• Strong analytical mindset with practical, hands-on experience securing industrial environments
• In-depth knowledge of OT security and networking, including SCADA, PLCs, and DCS
• Experience analyzing and mapping complex or legacy OT networks
• Hands-on experience with OT network segmentation and IP renumbering
• Experience conducting risk assessments and developing mitigation strategies
• Practical understanding of firewalls, network segmentation, and secure architecture principles
• Understanding of the Purdue model
• Experience implementing at least one of the following: OT firewalling, automated network monitoring, or network restructuring
• Experience with continuous monitoring using SNMP, NetFlow, or similar protocols
• Strong verbal and written communication skills
• Ability to explain complex OT security concepts clearly to technical and non-technical stakeholders
• Ability to work cross-functionally with IT and OT teams
• Flexibility for short-term international travel
• Excellent communication skills in Spanish and English
• Nice to have: Experience with Nozomi Networks solutions such as Guardian, Cisco certificate, Palo Alto firewall configuration, French

Условия:

• Travel to customer sites during key project phases is required
• Preferred location is Barcelona or the surrounding area
• The company provides continuous learning, mentorship, and access to AG Academy